Vulnerabilidades do Sricam Deviceviewer
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Sricam Deviceviewer: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:sricam:deviceviewer
CVE-2019-25436
Média · 6.5
CWE-303 20/02/2026
Sricam DeviceViewer 3.12.0.1 Password Change Security Bypass
Sricam DeviceViewer 3.12.0.1 contains a password change security bypass vulnerability that allows authenticated users to change passwords without proper validation of the old password field. Attackers can inject a large payload into the old password parameter during the change password process to bypass validation and set an arbitrary new password.
CVE-2019-25435
Alta · 7.8
CWE-121 20/02/2026
Sricam DeviceViewer 3.12.0.1 Local Buffer Overflow DEP Bypass
Sricam DeviceViewer 3.12.0.1 contains a local buffer overflow vulnerability in the user management add user function that allows authenticated attackers to execute arbitrary code by bypassing data execution prevention. Attackers can inject a malicious payload through the Username field in User Management to trigger a stack-based buffer overflow and execute commands via ROP chain gadgets.